T1002: T1002
View on MITRE ATT&CK
AlienVault
· Published 20/12/2025 21:05 · Modified 21/12/2025 00:46
Essential information
- MITRE technique ID
T1002- Confidence
- 100/100
- Revoked
- No
- Published
- 20/12/2025 21:05
- Modified
- 21/12/2025 00:46
- Author / Source
- AlienVault
Description
No description.
Marking (TLP)
TLP:GREEN
External references
Related entities
Intrusion sets, malware, reports, vulnerabilities, indicators and other entities linked to this technique.
Intrusion sets (APT) (6)
-
Danabot usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
-
Saaiwc Group usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
-
The MITRE Corporation Confidence 100
[APT38](https://attack.mitre.org/groups/G0082) is a North Korean state-sponsored threat group that specializes in financial cyber operations; it has been attributed to the Reconnaissance General Bureau.(Citation: CISA AA20-239A BeagleBoyz August 2020)…
First seen 01/01/1970 · Last seen 16/11/5138 · -
InTheBox usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
-
The MITRE Corporation Confidence 100
[Kimsuky](https://attack.mitre.org/groups/G0094) is a North Korea-based cyber espionage group that has been active since at least 2012. The group initially targeted South Korean government agencies, think tanks, and subject-matter…
First seen 01/01/1970 · Last seen 16/11/5138 · -
TA551 Shathak usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
Malware (20)
-
Ov3r_Stealer uses
-
XMRig CoinMiner usesFamily
-
Arkei usesFamily
-
DanaBot usesFamily
-
CoinMiner/Win.Agent.R631683 uses
-
IcedID usesFamily
-
Gozi uses
-
W4SP uses
-
Trojan/Win.Wacatac.C5571541 uses
-
Fastviewer uses
-
CoinMiner usesFamily
-
Nitrokod uses
Reports (1)
-
12 MITREs 1 Malware 1 APT